3 ms·
Would that be the same Microsoft that approved and digitally signed the buggy CrowdStrike Falcon Agent kernel mode driver for Windows?
by offmycloud 2y ago
Would that be the same Microsoft that approved and digitally signed the buggy CrowdStrike Falcon Agent kernel mode driver for Windows?
- jeroenhd 2y agoFrom what I can tell, Microsoft signed DigiCert's certificate, and DigiCert signed CrowdStrike's certificate, and CrowdStrike signed the driver file. Windows kernel signing does not work like Apple's Big Brother approach, it uses a set of certificate authorities. Microsoft does have a program for verifying drivers: WHQL, which you may recognise from the slower driver that Windows Update installs for your GPU before you download the faster one that didn't pass Microsoft's verification from the manufacturer's website. CrowdStrike doesn't seem to be WHQL-certified.